Or do the easy thing and perform a chinese fire-drill whenever the user logs in and bump them to the new encryption schema.
Or invalidate and send an email.
Or invalidate and send an email.
http://reddit.com/r/changelog/comments/lj0cb/reddit_change_p...